Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/41CBB5B87F7611ECAD50FA4EC4F9AE02.roa
File: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (raw, json)
Hash identifier: J62kW7vY7+y9yEuU2U+Umwljmn5gkb28051yzRtO/0Q=
Subject key identifier: 49:8B:E3:E6:5D:CD:B1:94:1F:69:33:11:6A:0C:8F:B6:02:3F:EF:B4
Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09
Certificate serial: 0DCA
Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/41CBB5B87F7611ECAD50FA4EC4F9AE02.roa
Signing time: Thu 22 Oct 2026 17:23:11 +0000
ROA not before: Thu 22 Oct 2026 17:23:11 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 134146
IP address blocks: 103.55.144.0/22 maxlen: 24
103.106.56.0/24 maxlen: 24
103.206.231.0/24 maxlen: 24
202.83.124.0/24 maxlen: 24
202.83.125.0/24 maxlen: 24
202.83.126.0/23 maxlen: 23
202.83.126.0/24 maxlen: 24
202.83.127.0/24 maxlen: 24
2400:4fc0::/32 maxlen: 32
2400:4fc0:1::/48 maxlen: 48
2400:4fc0:2::/48 maxlen: 48
2400:4fc0:3::/48 maxlen: 48
2400:4fc0:4::/48 maxlen: 48
2400:4fc0:5::/48 maxlen: 48
2400:4fc0:6::/48 maxlen: 48
2400:4fc0:7::/48 maxlen: 48
2400:4fc0:8::/48 maxlen: 48
2400:4fc0:9::/48 maxlen: 48
2400:4fc0:a::/48 maxlen: 48
2400:4fc0:b::/48 maxlen: 48
2400:4fc0:c::/48 maxlen: 48
2400:4fc0:d::/48 maxlen: 48
2400:4fc0:e::/48 maxlen: 48
2400:4fc0:f::/48 maxlen: 48
2400:4fc0:10::/48 maxlen: 48
2400:4fc0:11::/48 maxlen: 48
2400:4fc0:12::/48 maxlen: 48
2400:4fc0:13::/48 maxlen: 48
2400:4fc0:14::/48 maxlen: 48
2400:4fc0:15::/48 maxlen: 48
2400:4fc0:16::/48 maxlen: 48
2400:4fc0:17::/48 maxlen: 48
2400:4fc0:18::/48 maxlen: 48
2400:4fc0:19::/48 maxlen: 48
2400:4fc0:1a::/48 maxlen: 48
2400:4fc0:1b::/48 maxlen: 48
2400:4fc0:1c::/48 maxlen: 48
2400:4fc0:1d::/48 maxlen: 48
2400:4fc0:1e::/48 maxlen: 48
2400:4fc0:1f::/48 maxlen: 48
2400:4fc0:20::/48 maxlen: 48
2400:4fc0:21::/48 maxlen: 48
2400:4fc0:22::/48 maxlen: 48
2400:4fc0:23::/48 maxlen: 48
2400:4fc0:24::/48 maxlen: 48
2400:4fc0:25::/48 maxlen: 48
2400:4fc0:26::/48 maxlen: 48
2400:4fc0:27::/48 maxlen: 48
2400:4fc0:28::/48 maxlen: 48
2400:4fc0:29::/48 maxlen: 48
2400:4fc0:2a::/48 maxlen: 48
2400:4fc0:2b::/48 maxlen: 48
2400:4fc0:2c::/48 maxlen: 48
2400:4fc0:2d::/48 maxlen: 48
2400:4fc0:2e::/48 maxlen: 48
2400:4fc0:2f::/48 maxlen: 48
2400:4fc0:30::/48 maxlen: 48
2400:4fc0:31::/48 maxlen: 48
2400:4fc0:32::/48 maxlen: 48
2400:4fc0:33::/48 maxlen: 48
2400:4fc0:34::/48 maxlen: 48
2400:4fc0:35::/48 maxlen: 48
2400:4fc0:36::/48 maxlen: 48
2400:4fc0:37::/48 maxlen: 48
2400:4fc0:38::/48 maxlen: 48
2400:4fc0:39::/48 maxlen: 48
2400:4fc0:3a::/48 maxlen: 48
2400:4fc0:3b::/48 maxlen: 48
2400:4fc0:3c::/48 maxlen: 48
2400:4fc0:3d::/48 maxlen: 48
2400:4fc0:3e::/48 maxlen: 48
2400:4fc0:3f::/48 maxlen: 48
2400:4fc0:40::/48 maxlen: 48
2400:4fc0:41::/48 maxlen: 48
2400:4fc0:42::/48 maxlen: 48
2400:4fc0:43::/48 maxlen: 48
2400:4fc0:44::/48 maxlen: 48
2400:4fc0:45::/48 maxlen: 48
2400:4fc0:46::/48 maxlen: 48
2400:4fc0:47::/48 maxlen: 48
2400:4fc0:48::/48 maxlen: 48
2400:4fc0:49::/48 maxlen: 48
2400:4fc0:4a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl
rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Nov 2026 18:11:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3530 (0xdca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09
Validity
Not Before: Oct 22 17:23:11 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6ada467f-58f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2a:26:c0:ee:18:e9:54:0e:96:69:fa:49:98:
7d:19:55:ca:e6:c1:20:0d:b9:bc:dc:0c:f3:a4:ad:
2b:c5:d1:a2:02:f7:37:cc:e4:e7:eb:8e:e1:4c:4b:
7b:04:8f:54:a1:87:13:b9:10:7c:9a:25:68:bf:22:
21:af:62:25:6d:1d:5e:4d:61:53:3b:c7:90:62:2c:
b0:dc:32:5b:19:1c:68:96:d0:3b:d7:cc:42:12:e8:
44:ac:7f:5c:79:0a:aa:3a:f4:88:be:c2:95:26:1b:
dc:34:d1:8a:44:e3:3d:c1:fd:05:09:ab:14:5f:0a:
aa:6e:62:cb:cb:a4:98:c6:29:75:4d:1c:e3:b4:47:
f7:62:9e:cb:8a:d4:1d:c7:1f:ef:8a:9b:8c:2f:35:
87:6e:a5:64:92:80:0e:7e:c6:64:92:b3:b0:c0:b3:
ec:c9:64:63:2b:8f:80:a5:e7:ae:96:c1:71:27:7a:
d5:2a:e6:6e:27:94:fa:45:79:cd:27:18:e8:96:b5:
8a:05:e1:b9:9a:98:ce:3c:1c:10:b9:2f:0e:37:20:
ad:21:f5:fd:c6:fe:21:d7:14:53:00:6f:a4:af:b2:
6b:49:97:8e:94:15:bf:e7:ed:b7:f6:8b:a9:a3:a4:
3e:4d:c8:ef:2a:15:e6:bc:c9:72:9f:ec:e6:55:3b:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8B:E3:E6:5D:CD:B1:94:1F:69:33:11:6A:0C:8F:B6:02:3F:EF:B4
X509v3 Authority Key Identifier:
keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/41CBB5B87F7611ECAD50FA4EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.55.144.0/22
103.106.56.0/24
103.206.231.0/24
202.83.124.0/22
IPv6:
2400:4fc0::/32
Signature Algorithm: sha256WithRSAEncryption
d7:53:e0:15:83:9d:55:5c:47:71:56:18:57:70:42:14:c1:ac:
64:98:fe:eb:76:f6:ec:bb:da:2b:2e:bc:be:e3:e1:74:b3:8a:
98:57:e7:50:64:3a:c8:ed:80:cc:f6:3e:78:fb:a1:f7:11:f7:
b4:2e:97:c7:31:02:2f:08:6d:19:51:cd:3f:54:8c:69:20:fb:
f3:e4:11:05:9f:e0:14:cc:31:08:1d:f3:c9:a8:76:d0:e2:3f:
d9:53:d2:f3:26:78:46:74:8f:d0:7e:83:f3:9f:91:46:1b:8c:
51:01:25:77:93:e1:0a:c8:89:7c:8d:37:82:48:1d:68:ee:86:
18:7d:16:49:5e:fe:38:41:ae:0f:61:dd:f9:0f:7c:cf:cd:e2:
64:98:93:aa:31:da:96:53:fc:4c:cc:b9:30:ab:bc:b8:90:1a:
d1:80:79:7f:f6:1d:3b:ae:ce:f6:66:cc:f1:66:a9:6a:c4:70:
bf:14:9c:99:63:95:e5:b3:eb:e1:48:59:2f:2c:27:c0:51:50:
65:34:68:f6:97:99:aa:99:29:10:bb:59:a5:9a:0c:08:f8:5c:
e1:15:7d:b9:fa:6b:6f:73:cd:08:9f:9d:18:08:6f:9c:84:d7:
d5:e8:02:d1:bb:3b:02:5a:57:80:99:90:57:d3:d5:0e:22:de:
f9:39:38:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 21:05:06 2026 by rpki-client